# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=1126 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1127 --- ## [Multiple projects in same Kibana](https://discuss.elastic.co/t/multiple-projects-in-same-kibana/257347)
**Author:** [@xacobecm](https://discuss.elastic.co/u/xacobecm)\ **Replies:** 1\ **Last updated:** [December 4, 2020, 11:36am UTC](https://discuss.elastic.co/t/multiple-projects-in-same-kibana/257347 "2020-12-04T11:36:57Z")
This is my first post here, so hello everybody and thanks in advance for any help given. I've been working with elastic for a while now, until now I implemented it in the project's k8s cluster. Now, for multiple develo… --- ## [Location based dashboard](https://discuss.elastic.co/t/location-based-dashboard/257559)
**Author:** [@vibhz](https://discuss.elastic.co/u/vibhz)\ **Replies:** 4\ **Last updated:** [December 4, 2020, 11:22am UTC](https://discuss.elastic.co/t/location-based-dashboard/257559 "2020-12-04T11:22:51Z")
Hi, I am trying to create location based dashboard in kibana. location details are not available in the log message, we have to add a logic to map these. Please help. Usecase : Each location contains 400 servers, once w… --- ## [Helm Chart - existingClaim](https://discuss.elastic.co/t/helm-chart-existingclaim/255887)
**Author:** [@voipas](https://discuss.elastic.co/u/voipas)\ **Replies:** 1\ **Last updated:** [December 4, 2020, 10:48am UTC](https://discuss.elastic.co/t/helm-chart-existingclaim/255887 "2020-12-04T10:48:37Z")
Hey, I would like to ask if there are any option to use existingClaim setting to install elasticsearch using helm? I was not able to find this information here: https://github.com/elastic/helm-charts/tree/master/elastics… --- ## [\[ERROR\]\[logstashoutputselasticsearch\] Attempted to send a bulk request to elasticsearch but Elasticsearch appears to be unreachable or down](https://discuss.elastic.co/t/error-logstashoutputselasticsearch-attempted-to-send-a-bulk-request-to-elasticsearch-but-elasticsearch-appears-to-be-unreachable-or-down/257646)
**Author:** [@Cristiane\_Marcarini](https://discuss.elastic.co/u/Cristiane_Marcarini)\ **Replies:** 0\ **Last updated:** [December 4, 2020, 10:25am UTC](https://discuss.elastic.co/t/error-logstashoutputselasticsearch-attempted-to-send-a-bulk-request-to-elasticsearch-but-elasticsearch-appears-to-be-unreachable-or-down/257646 "2020-12-04T10:25:35Z")
What to do when this appears in the logstash log? \[2020-12-04T09:46:50,568\]\[WARN \]\[logstash.outputs.elasticsearch\]\[main\] Marking url as dead. Last error: \[LogStash::Outputs::ElasticSearch::HttpClient::Pool::HostUnreacha… --- ## [Elasticsearch bucket script aggregation in Kibana](https://discuss.elastic.co/t/elasticsearch-bucket-script-aggregation-in-kibana/257026)
**Author:** [@lakshman-battini](https://discuss.elastic.co/u/lakshman-battini)\ **Replies:** 2\ **Last updated:** [December 4, 2020, 9:33am UTC](https://discuss.elastic.co/t/elasticsearch-bucket-script-aggregation-in-kibana/257026 "2020-12-04T09:33:28Z")
I am trying to create the visualization in Kibana, to show the count of orders whose average api time is less than 60 Sec. Below are the sample ES index documents: order\_id time api 1 50.0 /login 1 … --- ## [Logstash / Enrich processor event sample rate](https://discuss.elastic.co/t/logstash-enrich-processor-event-sample-rate/257635)
**Author:** [@fran6ssl](https://discuss.elastic.co/u/fran6ssl)\ **Replies:** 0\ **Last updated:** [December 4, 2020, 9:18am UTC](https://discuss.elastic.co/t/logstash-enrich-processor-event-sample-rate/257635 "2020-12-04T09:18:14Z")
Hi, I have multiple CSVs files with sensors data. Each data file holds the timestamp and the numeric value of the sensor at that time. Each sensor has a different sample rate. For a exemple we have a temperature sensor… --- ## [Highlight and complex search](https://discuss.elastic.co/t/highlight-and-complex-search/257633)
**Author:** [@FABIAN\_HUTIN](https://discuss.elastic.co/u/FABIAN_HUTIN)\ **Replies:** 0\ **Last updated:** [December 4, 2020, 9:10am UTC](https://discuss.elastic.co/t/highlight-and-complex-search/257633 "2020-12-04T09:10:35Z")
Hey guys, Newbie Elastic user here. I'd like to share with you an issue I have while using the highlight feature in a complex search operation. What I want to achieve is to get the list of fields that match my search … --- ## [Mapping is present but field is missing](https://discuss.elastic.co/t/mapping-is-present-but-field-is-missing/257500)
**Author:** [@pskhanapur](https://discuss.elastic.co/u/pskhanapur)\ **Replies:** 2\ **Last updated:** [December 4, 2020, 9:01am UTC](https://discuss.elastic.co/t/mapping-is-present-but-field-is-missing/257500 "2020-12-04T09:01:19Z")
I have field which has mapping. I can verify that using GET /INDEX/\_mapping. However it is not visible in the fields in the search option in (Index pattern page). The field is visible in the Discover as well --- ## [Two Index pattern with different time filter field names](https://discuss.elastic.co/t/two-index-pattern-with-different-time-filter-field-names/257503)
**Author:** [@pskhanapur](https://discuss.elastic.co/u/pskhanapur)\ **Replies:** 2\ **Last updated:** [December 4, 2020, 8:55am UTC](https://discuss.elastic.co/t/two-index-pattern-with-different-time-filter-field-names/257503 "2020-12-04T08:55:19Z")
I have one index and I want to visualize my data using two different time filters (i.e. two different fields). Do I need to create two index patterns? Is it even possible to create two index pattern on same index? I tho… --- ## [Node count doesn't match](https://discuss.elastic.co/t/node-count-doesnt-match/257623)
**Author:** [@Nicolaegis](https://discuss.elastic.co/u/Nicolaegis)\ **Replies:** 1\ **Last updated:** [December 4, 2020, 8:33am UTC](https://discuss.elastic.co/t/node-count-doesnt-match/257623 "2020-12-04T08:33:11Z")
Hello, I manage a big Elasticsearch cluster with the following details: Elasticsearch version 5.6.6 Dedicated Master nodes - 3 Data nodes - 56 Total nodes - 59 Data nodes details : baremetal; 31 GB jvm heap; 4 x … --- ## [DateTime in Human Readable format Kibana](https://discuss.elastic.co/t/datetime-in-human-readable-format-kibana/257618)
**Author:** [@RamyaGowda](https://discuss.elastic.co/u/RamyaGowda)\ **Replies:** 2\ **Last updated:** [December 4, 2020, 8:18am UTC](https://discuss.elastic.co/t/datetime-in-human-readable-format-kibana/257618 "2020-12-04T08:18:50Z")
Hi Team, I was trying to create a metric visualization to show when was the last time server health is checked Max(DateTime) really doesnot make more sense to user,so i created the scripted field "LastCheckInHumanReada… --- ## [Connection Reset By Peer IOException](https://discuss.elastic.co/t/connection-reset-by-peer-ioexception/257457)
**Author:** [@surabhi11](https://discuss.elastic.co/u/surabhi11)\ **Replies:** 4\ **Last updated:** [December 4, 2020, 8:06am UTC](https://discuss.elastic.co/t/connection-reset-by-peer-ioexception/257457 "2020-12-04T08:06:04Z")
Hi All, We are getting Connection reset by peer issue with ElasticSearch Rest Client connection. Below issue is faced with both single & multi node cluster setup. Can someone please help in resolving this issue? Than… --- ## [Visualization show date format have day of week in Kibana](https://discuss.elastic.co/t/visualization-show-date-format-have-day-of-week-in-kibana/257301)
**Author:** [@thuhaa](https://discuss.elastic.co/u/thuhaa)\ **Replies:** 4\ **Last updated:** [December 4, 2020, 7:22am UTC](https://discuss.elastic.co/t/visualization-show-date-format-have-day-of-week-in-kibana/257301 "2020-12-04T07:22:33Z")
My index have date time type attribute. I want to create visualize use date histogram aggregation with interval days. It will be show date format like 2020-12-02. But I want to date show format have day of week like 2020… --- ## [Can't do rolling upgrade from 7.6.2 to 7.10.0](https://discuss.elastic.co/t/cant-do-rolling-upgrade-from-7-6-2-to-7-10-0/257549)
**Author:** [@rambling](https://discuss.elastic.co/u/rambling)\ **Replies:** 2\ **Last updated:** [December 4, 2020, 7:07am UTC](https://discuss.elastic.co/t/cant-do-rolling-upgrade-from-7-6-2-to-7-10-0/257549 "2020-12-04T07:07:43Z")
Hello. I was trying to do rolling update data node from 7.6.2 to 7.10.0 on Ubuntu 18.04. I followed the instructions: but after the update Elasticsearch can't start with next outputs: Dec 03 17:15:21 test-es-data-… --- ## [No handler for type \[multi\_field\] declared on field,I am using es 7.9.1](https://discuss.elastic.co/t/no-handler-for-type-multi-field-declared-on-field-i-am-using-es-7-9-1/257570)
**Author:** [@sanyoja\_sagare](https://discuss.elastic.co/u/sanyoja_sagare)\ **Replies:** 2\ **Last updated:** [December 4, 2020, 6:19am UTC](https://discuss.elastic.co/t/no-handler-for-type-multi-field-declared-on-field-i-am-using-es-7-9-1/257570 "2020-12-04T06:19:48Z")
No handler for type \[multi\_field\] declared on the field, I am using es 7.9.1 --- ## [Expected one of \[ \\\\t\\\\r\\\\n\], \\"#\\", \\"input\\", \\"filter\\", \\"output\\" at line 1, column 1 (byte 1)](https://discuss.elastic.co/t/expected-one-of-t-r-n-input-filter-output-at-line-1-column-1-byte-1/257612)
**Author:** [@ZoolYe](https://discuss.elastic.co/u/ZoolYe)\ **Replies:** 0\ **Last updated:** [December 4, 2020, 6:09am UTC](https://discuss.elastic.co/t/expected-one-of-t-r-n-input-filter-output-at-line-1-column-1-byte-1/257612 "2020-12-04T06:09:10Z")
docker pull docker.elastic.co/logstash/logstash:7.10.0 docker run --name=logstash-7.10 -v /xxx/logstash.yml:/usr/share/logstash/config/logstash.yml -v /xxx/logstash.conf:/usr/share/logstash/pipeline/logstash.conf -d doc… --- ## [Elasticsearch Reads](https://discuss.elastic.co/t/elasticsearch-reads/257613)
**Author:** [@Divit\_Sharma](https://discuss.elastic.co/u/Divit_Sharma)\ **Replies:** 0\ **Last updated:** [December 4, 2020, 6:15am UTC](https://discuss.elastic.co/t/elasticsearch-reads/257613 "2020-12-04T06:15:21Z")
Is there a setting in elasticsearch such that reads should be routed to replicas only and if replica isn't available then only it should be directed to primary? I know we have a option \_replica\_first in request body bu… --- ## [Logstash websocket input](https://discuss.elastic.co/t/logstash-websocket-input/257610)
**Author:** [@wpitt13](https://discuss.elastic.co/u/wpitt13)\ **Replies:** 0\ **Last updated:** [December 4, 2020, 5:27am UTC](https://discuss.elastic.co/t/logstash-websocket-input/257610 "2020-12-04T05:27:10Z")
Does the Logstash 'websocket' input plugin support authorization using Bearer tokens? I've tried multiple different syntaxes with no luck. --- ## [Duplicate events even after introducing fingerprint](https://discuss.elastic.co/t/duplicate-events-even-after-introducing-fingerprint/256355)
**Author:** [@Saravana37](https://discuss.elastic.co/u/Saravana37)\ **Replies:** 4\ **Last updated:** [December 4, 2020, 4:53am UTC](https://discuss.elastic.co/t/duplicate-events-even-after-introducing-fingerprint/256355 "2020-12-04T04:53:33Z")
Hello All , We have a weird issue in ELK . We have introduced fingerprint in logstash , But still we can see the duplicates in Kibana. Kindly help how can we improve this . input { beats { port =\> 5044 tags =\> \["… --- ## [Achieving resilience for logstash database pipeline](https://discuss.elastic.co/t/achieving-resilience-for-logstash-database-pipeline/257607)
**Author:** [@adityaPsl](https://discuss.elastic.co/u/adityaPsl)\ **Replies:** 0\ **Last updated:** [December 4, 2020, 4:41am UTC](https://discuss.elastic.co/t/achieving-resilience-for-logstash-database-pipeline/257607 "2020-12-04T04:41:13Z")
Hello Team, I am new to docker and just wanted to understand if i can achieve this, I have 3 node cluster and i am running logstash on one node , if that node goes down i want to start logstash on second node with last… --- ## [Accessing the logstash\_sqlite in logstash-input-mongodb plugin](https://discuss.elastic.co/t/accessing-the-logstash-sqlite-in-logstash-input-mongodb-plugin/257606)
**Author:** [@Durga\_AK](https://discuss.elastic.co/u/Durga_AK)\ **Replies:** 0\ **Last updated:** [December 4, 2020, 4:41am UTC](https://discuss.elastic.co/t/accessing-the-logstash-sqlite-in-logstash-input-mongodb-plugin/257606 "2020-12-04T04:41:06Z")
Hello, Im using the logstash-input-mongodb plugin to ingest data into Elastic Search from MongoDB, using logstash. I would like to know if the logstash\_sqlite can be accessed to know what in the latest \_id and also if t… --- ## [How to filter field with count in datatable](https://discuss.elastic.co/t/how-to-filter-field-with-count-in-datatable/257462)
**Author:** [@tungpzostar](https://discuss.elastic.co/u/tungpzostar)\ **Replies:** 2\ **Last updated:** [December 4, 2020, 4:25am UTC](https://discuss.elastic.co/t/how-to-filter-field-with-count-in-datatable/257462 "2020-12-04T04:25:47Z")
I have field state which has 2 values "BEGIN" and "END", I want to show count when state is "BEGIN" so I've tried { "query": { "match\_phrase": { "state": "BEGIN" } } } but nothing works, any idea how … --- ## [Kibana Elasticsearch does not recognize repository snapshots created for retrieval](https://discuss.elastic.co/t/kibana-elasticsearch-does-not-recognize-repository-snapshots-created-for-retrieval/257518)
**Author:** [@Nacho\_Revilla](https://discuss.elastic.co/u/Nacho_Revilla)\ **Replies:** 1\ **Last updated:** [December 4, 2020, 1:53am UTC](https://discuss.elastic.co/t/kibana-elasticsearch-does-not-recognize-repository-snapshots-created-for-retrieval/257518 "2020-12-04T01:53:38Z")
Hello everybody, I have a problem when recovering a snapshot from kibana, apparently it does not recognize the repository for its recovery. somebody could help me? Thanks a lot --- ## [One ES container with n search threads is slower than two containers with n/2 search threads](https://discuss.elastic.co/t/one-es-container-with-n-search-threads-is-slower-than-two-containers-with-n-2-search-threads/256965)
**Author:** [@alexklibisz](https://discuss.elastic.co/u/alexklibisz)\ **Replies:** 18\ **Last updated:** [December 4, 2020, 12:42am UTC](https://discuss.elastic.co/t/one-es-container-with-n-search-threads-is-slower-than-two-containers-with-n-2-search-threads/256965 "2020-12-04T00:42:46Z")
I'm running a benchmark to optimize for search throughput (i.e. queries/second). The query I'm profiling is a custom query in an Elasticsearch plugin. The query is very similar to the Terms Set Query. I tried one setup … --- ## [How to Disable SSL Certificate Verification for Logstash-Plugin (installing plugins)](https://discuss.elastic.co/t/how-to-disable-ssl-certificate-verification-for-logstash-plugin-installing-plugins/257590)
**Author:** [@Jeremy\_A](https://discuss.elastic.co/u/Jeremy_A)\ **Replies:** 0\ **Last updated:** [December 3, 2020, 9:44pm UTC](https://discuss.elastic.co/t/how-to-disable-ssl-certificate-verification-for-logstash-plugin-installing-plugins/257590 "2020-12-03T21:44:34Z")
This is more of an information post than a question, because I noticed several unanswered questions along these lines while searching for a solution myself. The problem occurs when trying to use bin/logstash-plugin to i… --- ## [Найти все документы с максимальным значением](https://discuss.elastic.co/t/topic/257513)
**Author:** [@Leleka](https://discuss.elastic.co/u/Leleka)\ **Replies:** 5\ **Last updated:** [December 3, 2020, 6:41pm UTC](https://discuss.elastic.co/t/topic/257513 "2020-12-03T18:41:00Z")
У меня есть такая структура БД в эластике: \[ { "Number": 250, "Date": 1606996816 }, { "Number": 251, "Date": 1606997816 }, { "Number": 251, "Date": 160… --- ## [How to create bar chart with time intervals x axis in kibana?](https://discuss.elastic.co/t/how-to-create-bar-chart-with-time-intervals-x-axis-in-kibana/257359)
**Author:** [@Cristiane\_Marcarini](https://discuss.elastic.co/u/Cristiane_Marcarini)\ **Replies:** 3\ **Last updated:** [December 3, 2020, 6:15pm UTC](https://discuss.elastic.co/t/how-to-create-bar-chart-with-time-intervals-x-axis-in-kibana/257359 "2020-12-03T18:15:57Z")
how to create bar chart with time intervals x axis in kibana? Can be with JSON or grok. --- ## [Upgraded beats (7.10) still writing to old version indices](https://discuss.elastic.co/t/upgraded-beats-7-10-still-writing-to-old-version-indices/257405)
**Author:** [@rgeisman](https://discuss.elastic.co/u/rgeisman)\ **Replies:** 9\ **Last updated:** [December 3, 2020, 6:12pm UTC](https://discuss.elastic.co/t/upgraded-beats-7-10-still-writing-to-old-version-indices/257405 "2020-12-03T18:12:03Z")
Hello all. A maddening problem. We upgraded our cluster to 7.10 (ES, Logstash, Metricbeat, Auditbeat, Filebeat). Since we use Logstash I manually loaded each index template for the beats and default dashboards, then I … --- ## [Error Metricbeats in Kibana](https://discuss.elastic.co/t/error-metricbeats-in-kibana/256402)
**Author:** [@Cristiane\_Marcarini](https://discuss.elastic.co/u/Cristiane_Marcarini)\ **Replies:** 2\ **Last updated:** [December 3, 2020, 6:10pm UTC](https://discuss.elastic.co/t/error-metricbeats-in-kibana/256402 "2020-12-03T18:10:34Z")
\[exception\] Security must be explicitly enabled when using a \[basic\] license. Enable security by setting \[xpack.security.enabled\] to \[true\] in the elasticsearch.yml file and restart the node.: Check the Elasticsearch Mon… --- ## [Indexing JSON throws MapperParsingException](https://discuss.elastic.co/t/indexing-json-throws-mapperparsingexception/257563)
**Author:** [@hKerma](https://discuss.elastic.co/u/hKerma)\ **Replies:** 0\ **Last updated:** [December 3, 2020, 6:06pm UTC](https://discuss.elastic.co/t/indexing-json-throws-mapperparsingexception/257563 "2020-12-03T18:06:09Z")
Hi everyone, I created that topic, thinking I had a Logstash issue, but it seems like it's an Elasticsearch indexing issue. Let me recap : I'm trying to parse and index k8s audit logs, which are valid JSONs, with Logst… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1125) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1127)